|
Whitepaper
Policy Abstract
Nowadays, most of the enterprises, government
organizations and the educational
institutions are beginning to realize that WAN is one of the most
important capital, which need to establish and guarantee the function
of WAN so that the enterprises, governments organizations and the
school can have the well operation. In order to reach that goal, IT
administrators need to comprehend that where are WAN going and who has
the responsibility for it.
The traditional traffic analysis uses packet analyser to
provide the network traffic packet and the detail information. However,
it is a complicated process for software exploration, and it usually
ignores IPsec traffic. The result from the packet analyser is too
extensively, and it is not the direct visible result for the specific
programs traffic. Because of that reason, there will be more and more
bugs for the administrators and will cost more and more time to resolve
the problems.
After using NETflow (product of
Cisco) and S-Flow (regulation of IEEE), it only need a few time to
analyze traffic flow for the enterprises, government organizations and
schools. Netflow and S-Flow can sequentially collect the detail
information for the Packet which is relating with IP traffic, and will
not increase the cost or influence the functions for the device. For
using the derive Netflow data, Curelan Tech. Co., Ltd. can use
Flowviewer to help the IT administrators to realize all of the
information of WAN.
Demend for Network Visible Ability
The distributed of the
enterprises, government organizations and the schools sometimes will
cause the operating problems for the network administrator. The IT
groups always need to judge the WAN bug for the network, and return the
performance level when the performance is lower than the normal
performance, but thy usually short of the ability of finding out the
root cause for the bug.
In order to overcome these
challenges, the IT administrators need to observe the traffic which
pass through the WAN, after got these detail information, they can
monitor and record the network activities to realize that how do the
networks, programs and the users work together. So that only uses the
effective traffic analysis can possibly make the network to be visible
ability.
Traffic Analysis: Key point for the Network Visible
Ability
Use the traffic
analysis, IT administrator can response the key questions for network
as following:
l
Does the
important sales program can reasonably use the usable bandwidth?
l
How to identify
the undesired program and the virus for the network?
l
Why are the WAN
been chocked?
l
Which programs
and user are using the bandwidth?
The effective flow analysis must
be fast, simple and high efficiency. It must be compositive and can not add the burden for the equipment while
the system is collecting the flow data. And just because of the above
reasons, Cisco NetFlow and IEEEE S-Flow come with the tide of
fashion.
Cisco Netflow and IEEEE S-Flow: Support the Flow Analysis
Cisco, the router and switch
(which have the S-Flow function) enter Netflow or S-Flow function into
the equipment to do the flow analysis. When Netflow or S-Flow enter
into the interface, and provide the IP collection function for Cisco
switch or S-Flow switch. Because of the router is a kind of probe, so
that it will not cost too much capital for that.
As a tool for analyzing the traffic
flow, Netflow or S-Flow can provide the software inspecting than other
superiorities which are other traditional flow analysis equipments.
l
Easy Configuration: set up Netflow or S-Flow on the
router.
l
Complete Data: Netflow or S-Flow is mainly aim at
all the programs to do the flow survey and flow report.
l
Low maintenance cost: because of the
maintenance of Netflow or the S-Flow is set up on the Cisco router.
It is undeniable that use Netflow or S-Flow will increase
some CPU utility rate for the
disposed router (the router CPU utility rate will different from the
router traffic flow); however, provide detail data, low cost and easily
to dispose is the superiority for Netflow and S-Flow.
After collecting the Netflow or
S-Flow data, system need to analyze the traffic report to support the
high-speed and high efficiency flow analysis. Although there are lots
of the data analysis tools in the market, Flowviewer (products of
Curelan) has the excellent
quality and reasonable price than any other products.
Flowviewer : Effective Traffic Flow Analyze Equipment
Flowviewer is a kind of web tool,
for analyzing the Netflow data, which come from the Cisco router to
provide the advanced network flow data, i.e. communication capacity,
maximum flow maker, bandwidth consuming and the high utility rate.
Flowviewer provide the information, which can help the IT administrator
to execute:
l
Mark the maximum
flow maker and the dialogue:
make sure who the maximum is and provide the detail dialogue.
l
Real-time flow
mode: to check
the IP flow also to make sure the peak value, up/download flow.
l Make sure the internal real-time bandwidth utility rate:
basic on the internal specific
IP, in other words, IT administrator want to check the specific IP
bandwidth utility rate dynamically.
l
Expert management
for Netflow or S-flow device: group Netflow or S-Flow data into logic
group only for analyzing the flow report.
l
Raising the
calculating accuracy: use real-time bandwidth and the network utility rate to raise the
recourses utility rate.
l
Real-time flow report mode:
only cost few seconds (within 10 seconds) to display the flow report,
the IT administrator will not waste time to enquire the flow report.
l
Research and develop the database by oneself: the other flow report system usually use the SQL or MY
SQL to collect the IP traffic; however, Curelan Tech. Co, Ltd. develop
the flow calculation method by oneself (just like the Arbor Company),
and it is high accuracy for
IP flow statistics and you can have the flow report just within 10
seconds.
l
Adopting NBAD (Network Behavior Abnormal Detecting)
technology, providing early warning way to detect the unknown worm: because of there are too much Internet warm in the
enterprises , government organizations and schools to result in the
internal network problems for WAN. So that CureLan company use the
network behavior abnormal detecting way to develop the detecting unknown
worm attacking report which can find out the worm attack, display the
traffic flow, service port.
l
Provide Quota control function: set up the user-pay program which means to limit quota
for each IP for a day(set up the limitation by the administrator), when
it is overload for the system, it will logoff immediately and after 24
hours or 48 hours will reset again.
l
Provide automatically worm detecting function: this function can early warning and detect the unknown
worm and disconnect the IP to avoid the worm to attack the other
internal IP.
WAN Flow Analysis-Key Point for Network Optimization
WAN flow analysis is playing a
very important role for the enterprises nowadays, it can provide the
concentrical way for WAN, application program and the remote user. WAN
flow analysis allow the IT administrator to observe the relationship
between WAN and sales operation which can help to resolve the properly
problems for the IT administrator.
Flowviewer is a kind of advanced
analysis for WAN. Using Flowviewer can reduce the complaints from
users, simplify the maintenance job for the administrator also can
promote performance for WAN.
Flowviewer provides the
inexpensive but powerful program to reduce the attacking for facilities
and the network. Using Cisco Netflow and NetFlow Analyzer, the
enterprises can resolve the problems of WAN and save the cost for
purchasing the unnecessary products.
|
